Should Elastic Search be reindexed if I make any configuration changes to Logstash

Elastic Stack Logstash
1

Hi
If I make any configuration changes to Logstash.
Will I see the chnages applied to Elastic Search
For Example
If I change the grok pattern and added new Fields,
Will I be able to see the chnages effected on already indexed logs.

If not what should I do?
Should I re-index whole old logs which are already indexed again to see the new fields??

2

Yes, is you change the logstash filters to add new fields you will need to re-index data to see the new fields on old documents.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.